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Method and computer program for controlling access 
rights to an application 

The invention relates to a method and a computer 
10 program for controlling access rights of users for 
accessing, by means of a plurality of operator control 
units, at least one application which is preferably 
provided in a vehicle. Furthermore, the invention 
relates to a data carrier with such a computer program. 

15 

DE 198 53 665 discloses a vehicle communications system 
and method for exchanging data in a vehicle. The 
vehicle communications system comprises a central 
system controller which can grant individual and 

20 different access rights to individual applications to 
individual operator control units of the system. This 
central system controller is implemented in a central 
processing unit or some other arithmetic unit of the 
vehicle communications system. In this context the 

25 ranking, which is assigned to an operator control unit, 
can be defined either uniformly for all applications or 
individually for each application. In addition, the 
central system controller can allocate output devices 
to operator control units. The central system 

30 controller has a central priority management system. 
One aspect of this is the allocation of access rights 
for operator control units to a data bus and/or to 
individual applications. When a plurality of actions 
which have priorities attached to them coincide, the 

35 central priority management system resolves possible 
conflicts in favor of one of the actions. These 
competing actions may, for example, involve two 
operator control units with specific priorities 
requesting an application with a specific priority on 
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the same physical device which does not have a multi- 
console capability. The time ranking of the action can 
also be a suitable decision criterion for the solution 
of such a conflict. 

5 

The aforesaid prior art is subject to the disadvantage 
that in said prior art the access rights which are 
mentioned in it are defined essentially only for 
individual operator control units on a data bus and/or 

10 with respect to individual applications but the access 
rights are not placed in a concrete context with 
respect to a man/machine interface, that is to say 
ultimately for individual _ users or _ operator control 
units. When placing the access rights or access 

15 principles in a concrete context it is necessary to 
consider that not all applications are suitable to the 
same extent for all known access principles. 

For this reason, taking the prior art as a basis, the 
20 object of the invention is to provide a method and a 
computer program for providing an access principle for 
applications and a data carrier with this computer 
program and a communications system for carrying out 
this method, which takes into account only the 
25 particular suitability of individual applications for 
specific access principles. 

This object is achieved by means of the method claimed 
in patent claim 1. According to said claim, a method 

3 0 for providing an access principle for access operations 
of users by means of at least two operator control 
units to the same application which is preferably 
provided in a vehicle is characterized in that the 
access principle is provided on an application-specific 

35 basis. 

Examples of access principles in the sense of the 
invention are in particular the "last wins" access 
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principle according to which that user who accesses an 
application last also controls this application and 
determines its behavior. In this context, the 
respective content on the two operator control units 
5 may be different. A further access principle in the 
sense of the invention is "in parallel in terms of 
switching", which provides that the same content is 
inevitably displayed on all operator control units, 
irrespective of whether different access operations are 

10 made to the same application at different operator 
control units. Furthermore, the "first wins" access 
principle, according to which that user who first 
- -accesses an application also controls this application 
and determines its behavior. The "first wins" access 

15 principle preferably provides for a visual and/or 
audible warning message to be issued by means of the 
second operator control unit if the application could 
be disrupted, or is disrupted, from the first operator 
control unit. Alternatively or additionally the "first 

20 wins" access principle can also be implemented in such 
a way that the access operation to the second operator 
control unit for the application is blocked until the 
warning message which is issued by means of the second 
operator control unit is acknowledged. 

25 

An application in the sense of the invention comprises 
at least one function which permits services to be 
provided for the user. Typical examples of applications 
are "audio" , provided by an audio or hif i system, 

30 "video", provided by a video recorder, "navigation", 
provided by a navigation system or "communication", 
provided by a communications device, preferably with an 
Internet connection, in particular a personal computer, 
preferably with Internet connection. One function is 

35 respectively carried out by one of these resources 
units . 
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The advantage of the claimed, application-specific 
provision of access principles can be considered that 
this takes into account the fact that not every 
application is suitable for all only conceivable or 
5 available access principles. There are often technical 
restrictions which make an application appear suitable 
only for a specific access principle. 

The "last wins" access principle is respectively 
10 advantageously provided for the "audio" and "video" 
applications, and the "parallel in terms of switching" 
principle is respectively advantageously provided for 
the navigation- system application. 

15 In specific cases in the case of applications for which 
the "parallel in terms of switching" access principle 
is activated it is possible to provide a specific case 
of this principle, that is to say the "superuser" 
access principle for this application. 

20 

Furthermore, it is advantageous to output a visual 
and/or audible warning by means of an operator control 
unit if the sequence of an application on another 
operator control unit could be disrupted, or is 
25 disrupted, by the access operation from the operator 
control unit to the application. 

The abovementioned object is also achieved by a 
computer program and a communications system for 
3 0 carrying out the claimed method, and by a data carrier 
with the computer program. The advantages of these 
solutions correspond to the advantages specified above 
with respect to the claimed method. 

35 A single figure which shows the design of the claimed 
communications system in a vehicle is appended to the 
description . 
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The invention is described in more detail below in the 
form of exemplary embodiments and also with reference 
to the figure. 

The single figure shows a vehicle 200 with wheels 230 
and with a communications system 100 according to the 
invention. The communications system comprises a 
computing unit 110 for controlling applications and a 
plurality of operator control units 120-1... -3 for 
providing the applications for their users at various 
locations within the vehicle. The driver's seat 210-1 
and the front seat passenger's seat 210-2 are jointly 
allocated the central operator control unit 120^1 in 
the cockpit of the vehicle 200, while the places on the 
rear bench seat 220 within the vehicle 200 are 
allocated the operator control units 120-2 and 120-3 at 
the rear of the vehicle. 

The inventive allocation of individual access 
20 principles to individual applications is basically 
carried out automatically or is permanently predefined. 
It is preferably configured in such a way that it 
occurs basically only if a resource conflict, that is 
to say a conflict between users when accessing the same 
25 application from different operator control units 120, 
cannot be regulated, for example, by verbal agreement. 
A number of situation scenarios in which such a 
solution negotiated between people is not possible are 
described below: 

30 

A resource which is already being used by an 
application called from the rear of the vehicle 
is requested in the cockpit of a vehicle 200, 
that is to say in particular from the driver's 
35 or front seat passenger's seat by means of an 

application. Example: the "navigation" 

application is being used to simultaneously 
access the same resource, the disk player, both 
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from the cockpit and from the rear of the 
vehicle. The passenger at the rear of the 
vehicle cannot release the resource because, 
for example, he has got out of the vehicle, has 
5 dirty fingers or does not know how he should 

perform the release. In this case, nevertheless 
it must be possible to transfer the resource 
from the cockpit . 

10 A passenger at the rear of the vehicle wishes 

to see a video but does not know how to set it . 



- "A young child is sitting at - the rear of the 
vehicle. The young child should be prevented 
15 from alarming the driver by meddling with the 

audio sources, for example with a volume 
controller, thus bringing about a dangerous 
situation . 



20 A young person is sitting at the rear of the 

vehicle. The young person should be prevented 
from accessing expensive sources and/or sources 
which are not suitable for young people. 

25 - A boss is sitting at the rear of the vehicle 

and does not wish a person in the cockpit, in 

particular the driver, to be able to read his 
e-mails or telephone lists. 



30 - A passenger at the rear of the vehicle has 

received interesting information, for example a 
destination, via a specific application in the 
form of an information service, and would like 
to transfer this information to the driver as a 

35 data record . 



While the driver is using a routing function of 
the navigation system, the passenger at the 
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rear of the vehicle would like to be able to 
view points of interest POIs or be able to 
freely select details from a map using the same 
navigation system. 

5 

The driver supports the rear seat passenger by 
executing working steps or functions for the 
rear seat passenger from the operator control 
unit in the cockpit in order to permit said 
10 passenger to use a specific application. To do 

this the driver also enters the rear seat 
passenger's secret code. 

The driver supports the rear seat passenger in 
15 a way which is analogous to the previous 

scenario, but this time without having to input 
the secret code of the rear seat passenger 
because the rear seat passenger does not wish 
to disclose this code to the driver. 

20 

Solutions for the handling of the conflict cases given 
above will now be presented below by way of example. 
These conflict cases occur primarily between the two 
rear operator control units. Conflicts between the 

2 5 operator control unit in the cockpit and the operator 

control units at the rear generally occur only when the 
navigation system and the transmission unit of the 
mobile telephone are accessed. 

3 0 Entertainment 

Entertainment comprises the "audio" and "video" 
applications. According to the invention, these two 
applications are respectively allocated the "last wins" 
35 access principle. This ensures that that user who last 
brought about an action, for example the changeover of 
a CD, controls the system. With this access principle 
there is no "owner" of the application in the sense 
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that the user alone determines who can access the 
application or how the application can be operated at 
one time. If a passenger at the rear uses one of the 
entertainment applications by means of a headset, a 
5 warning appears for another user who would like to 
access this application. If this warning is 
acknowledged by the passenger at the rear, the 
passenger at the rear thus enables access for the other 
user to the application. This warning is then repeated 
10 if the other, requesting user in the meantime switches 
over to another entertainment application, in 
particular another audio source. 

A common resource which applications which are called 

15 from the rear of a vehicle have to share is the sound 
system in a single cab vehicle. Audio sources, that is 
to say data sources in the form of CDs etc. for the 
sound system are accessible only from the respective 
operator place in the vehicle. It is not possible to 

2 0 access a CD changer in the rear of the vehicle from the 
cockpit or to access a cassette drive at the front of 
the vehicle from the rear. If the sound system is 
currently occupied by a rear seat passenger, with the 
sound system accessing an audio source in the rear of 

25 the vehicle, and at the same time the driver of the 
vehicle attempts also to access the sound system and 
for this purpose activates a different source, for 
example at the front of the vehicle, for the sound 
system, a warning appears for the rear seat passenger. 

30 The rear seat passenger releases the sound system for 
the driver only if he acknowledges this warning. The 
sound system can then access the audio source which is 
desired by the driver and is located at the front of 
the vehicle, for example. 

35 



Communications 
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The "communications" application comprises in 
particular a mobile telephone or a communications 
device with Internet connection, in particular a PC 
with Internet connection. In these cases, the 
communications channel resource, in particular the 
connections of these applications to the outside world, 
is the critical parameter. It is necessary to prevent a 
subscriber from erroneously interrupting the connection 
of another subscriber. For this reason, the invention 
proposes that a current user of the communications 
channel, whether this be by means of the mobile 
telephone or a communications device with Internet 
connection, in- particular by means of -the PC with 
Internet connection, receives a warning message if 
another user attempts also to access this 
communications channel. The current user is then 
requested to explicitly enable his application to be 
interrupted by the other user by means of a 
confirmation, and if he does not do this the current 
user can continue- to access the communications channel 
with his application and the other user is refused the 
permission to use the communications channel. 

For the configuration of the "communications" 
application there are in particular three various 
alternatives : 

1 . There is only one transmission unit of a mobile 
telephone, specifically in the cockpit of the 
vehicle. In this case, the conflicts between all 
three operator control units, that is to say 
between the operator control unit in the cockpit 
and the two operator control units at the rear of 
the vehicle, are regulated. 

2 . There is a transmission unit of a mobile telephone 
in the cockpit and one at the rear of the vehicle. 
In this case, conflicts occur only between the two 
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operator control units at the rear of the vehicle 
since the transmission unit in the cockpit is 
available exclusively to the driver. 

5 3 . There is a transmission unit in the cockpit and 
one at the rear. The transmission unit in the 
cockpit can according to the invention also be 
operated from the rear. In this case, the 
conflicts between all three operator control units 
10 are regulated. 

When there is an incoming call, a warning message is 
also displayed on the rear operator control unit. 

15 Navigation 

With the ''navigation" application it is not possible 
for reasons of resources to permit different access 
operations to the application in the cockpit and at the 

2 0 rear of the vehicle. Thus, for example, it is not 

possible to display different maps in the cockpit and 
at the rear of the vehicle or to display one map in the 
cockpit and at the same time enter a destination from 
the rear of the vehicle. 

25 

For this reason, according to the invention the 
''navigation" application is allocated the "parallel in 
terms of switching" access principle. This means that 
as long as a navigation mask is called up both on the 

3 0 operator control unit in the cockpit and on the 

operator control units at the rear, the same content is 
displayed on both operator control units. This occurs 
irrespective of whether a specific soft key or a 
specific hard key is pressed on one of the operator 
35 control units in the cockpit or at the rear of the 
vehicle. The same applies to simultaneous operator 
control of the "navigation" application by means of the 
two operator control units at the rear of the vehicle. 
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If the "navigation" application is activated on one of 
the operator control units and a MAP key, with which a 
map of the navigation system is called, is pressed on a 
5 different operator control unit by a different 
subscriber, a warning appears on the operator control 
unit at which the navigation system is active. The 
requested map will not be released on the other 
operator control unit until this warning is 
10 acknowledged by the original user. The same applies 
conversely if the map is active at the original user 
and a NAV key is pressed on the other operator control 
unit in order to call the navigations system or to 
transfer the navigation system into a basic mode. 

15 

In specific cases, it is possible within the scope of 
the "parallel in terms of switching" access principle 
which is to be recommended in particular for the 
"navigation" application to use the specific 

20 "superuser" access principle. The "superuser" access 
principle is distinguished by operator control which is 
parallel in terms of switching and which can be 
switched on and off by an authorized user. The latter 
is recommended for example if the operator control of 

25 an operator control unit 120 at the rear is to be 
performed from the cockpit in order to support the user 
of this operator control unit at the rear in his use of 
said unit. For this purpose there is provision that 
within a basic video mask on the operator control unit 

3 0 in the cockpit the system switches over between the 
left-hand or right-hand operator control unit at the 
rear . 

The operator control is then carried out by means of 
3 5 the hard keys and/or soft keys of the operator control 
unit 120-1 in the cockpit. 
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During the "superuser" access principle, operator 
control is possible both from the cockpit and from the 
places at the rear of the vehicle. On the operator 
control units 120-2, 120-3 at the rear of the vehicle a 
5 symbol then indicates that the same image is displayed 
on the operator control unit 120-1 in the cockpit. This 
option can preferably be switched off by means of a 
configuration menu of the operator control unit at the 
rear of the vehicle. For safety reasons it is 
10 recommended that in video applications in the superuser 
mode only a still image is displayed on the operator 
control unit 120-1 in the cockpit if the vehicle's 
velocity exceeds a predefined threshold value. 

15 Two alternative ways of exiting the superuser mode are 
presented : 

On the one hand, pressing on an eject key and on the 
other hand simultaneously pressing two numerical keys. 
2 0 From the point of view of the man/machine interface the 
first alternative is preferred. 

Child safety 

25 According to the invention, access rights for children 
are restricted to specific applications at the places 
220 in the vehicle at which children usually sit. This 
restriction can basically be implemented in different 
stages. For example, children can be refused any access 

30 rights to applications or their access rights to 
specific communication resources can be restricted. 



